nginx-CVE-2017-7529

Vulnerabilidad de lectura fuera de límites en la caché de Nginx CVE-2017-7529 Principio de la vulnerabilidad Lectura de referencia: https://cert.360.cn/detailnews.html?id=b879782fbad4a7f773b6c18490d67ac7...

EUVD-2026-81087

A weakness has been identified in GPAC 26.08-DEV. This impacts the function waitforheaderandparse of the file src/utils/downloader.c. This manipulation of the argument Content-Range causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and...

CVE-2026-92475

GPAC 26.08-DEV contains an out-of-bounds read vulnerability in the function wait_for_header_and_parse within the file src/utils/downloader.c. The flaw is triggered by manipulating the Content-Range argument, leading to an out-of-bounds memory read. Exploitation requires local access and low privi...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

BlueCloud

Resumen Despliegue de Cyber Range de HELK y Velociraptor. Implementación automatizada con Terraform de un sistema que ejecuta el servidor HELK + Velociraptor con un endpoint Windows registrado en Azure o AWS. Una colección de scripts de Terraform y Ansible que implementan automáticamente y...

recollapse

REcollapse REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications. It can also be helpful to bypass WAFs and weak vulnerability mitigations. For more information, take a look at the REcollapse blog post. The goal of this tool ...

CVE-2025-52914

CVE-2025-52914 ¿Cómo funciona este método de detección? Las versiones se extraen de los hosts objetivo, específicamente de la respuesta HTML SVRVER en el cuerpo, y luego se comparan con versiones anteriores a 9.3.1 y versiones desde 10.0.26 hasta 10.1.101 inclusive. ¿Cómo ejecuto este script? 1...

-Exploit-CVE-2017-7529

-Exploit-CVE-2017-7529 CVE-2017-7529: Las versiones de Nginx desde 0.5.6 hasta 1.13.2 inclusive son vulnerables a un desbordamiento de enteros en el módulo de filtro de rangos de nginx, lo que resulta en la filtración de información potencialmente sensible provocada por una solicitud especialment...

CVE-2017-7529

CVE-2017-7529 Las versiones de Nginx desde la 0.5.6 hasta la 1.13.2 inclusive son vulnerables a una vulnerabilidad de desbordamiento de enteros en el módulo de filtro de rangos de nginx, lo que resulta en la fuga de información potencialmente sensible provocada por una solicitud especialmente...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

attack_range

Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...

CVE-2026-16723

CVE-2026-16723 Exploit A standalone C++17 implementation for CVE-2026-16723 , a critical vulnerability affecting Fastjson versions 1.2.68 – 1.2.83. Requirements Linux or WSL on Windows C++17 compatible compiler GCC 7+ or Clang 5+ CMake 3.10 or newer System packages: libzip-dev zlib1g-dev Debian /...

apache__dubbo_CVE-2021-30180_2-7-9

Proyecto Apache Dubbo...

cve-2022-42889

cve-2022-42889 cve-2022-42889 Text4Shell afecta a Apache Commons Text versiones 1.5 a 1.9. Se ha parcheado a partir de la versión 1.10 de Commons Text. referencias: https://securitylab.github.com/advisories/GHSL-2022-018ApacheCommonsText/ https://github.com/karthikuj/cve-2022-42889-text4shell-doc...

Astro Cloudflare Adapter - Server Side Request Forgery

Astro is a web framework for content-driven websites. Versions 11.0.3 through 12.6.5 are vulnerable to SSRF when using Astro's Cloudflare adapter. When configured with output: 'server' while using the default imageService: 'compile', the generated image optimization endpoint doesn't check the URL...

CVE-2023-23946

CVE-2023-23946 Exploit This repository contains a functional Proof of Concept PoC exploit for CVE-2023-23946 , affecting Git prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8. Demonstration Usage root@kitploit: git clone...

CVE-2020-9484

CVE-2020-9484 Apache Tomcat RCE CVE-2020-9484 Las versiones afectadas son: Apache Tomcat 10.x 10.0.0-M5 Apache Tomcat 9.x 9.0.35 Apache Tomcat 8.x 8.5.55 Apache Tomcat 7.x 7.0.104...

iptodomain

iptodomain Descripción: Esta herramienta te permite extraer dominios de un rango de IPs, utilizando la información histórica archivada en Virustotal usando la clave API. Es útil si quieres saber qué dominios están detrás de esta dirección IP, por ejemplo, en programas de bug bounty uno de los...

CVE-2026-89911

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap TLBI Range to the architural limit TLB Invalidation by Range has a fairly powerful way of encoding pretty large ranges in a small number of bits. This range can be based on an arbitrary VA, which means i...

RRC_steganography

Esteganografía RRC Esteganografía por Codificación de Rango Rotacional RRC — un método esteganográfico lingüístico eficiente y demostrablemente seguro que incrusta mensajes secretos en texto en lenguaje natural generado por modelos de lenguaje de gran tamaño. Artículo : Efficient Provably Secure...